[SURBL-Discuss] RE: Start an IP list to block?

Chris Santerre csanterre at merchantsoverseas.com
Fri Sep 10 16:49:32 CEST 2004



>-----Original Message-----
>From: Jeff Chan [mailto:jeffc at surbl.org]
>Sent: Thursday, September 09, 2004 6:16 PM
>To: SURBL Discuss; SpamAssassin Users
>Subject: Re: [SURBL-Discuss] RE: Start an IP list to block?
>
>
>On Thursday, September 9, 2004, 2:26:37 PM, Chris Santerre wrote:
>
>
>>>-----Original Message-----
>>>From: jm at jmason.org [mailto:jm at jmason.org]
>>>Sent: Thursday, September 09, 2004 5:17 PM
>>>To: Raymond Dijkxhoorn
>>>Cc: Alex Broens;
>>>users-return-15498-sa-list=alexb.ch at spamassassin.apache.org; SURBL
>>>Discussion list (E-mail); Spamassassin-Talk (E-mail)
>>>Subject: Re: Start an IP list to block? 
>>>
>>>
>>>-----BEGIN PGP SIGNED MESSAGE-----
>>>Hash: SHA1
>>>
>>>
>>>Raymond Dijkxhoorn writes:
>>>> Hi!
>>>> 
>>>> > Chris, Raymond ,
>>>> >
>>>> > I went thru a random few of these and they're were listed 
>>>at Spamhaus.
>>>> > Using spamhaus at SMTP level or SA doing RBL lookups would 
>>>have caught and 
>>>> > stopped them... Spamcop probably has quite a few of them 
>>>listed as well
>>>> 
>>>> No, that wont work. The spams are sended in via 
>>>trojans/proxys only the 
>>>> websites are static. SOME are blocked with DSBL and so but 
>>>most of the 
>>>> time they start a spamrun with a fresh set it seems.
>>>> 
>>>> So yes, they are inside spamhaus, but only the websites, 
>>>didnt see mails 
>>>> sended out from there (yet).
>>>
>>>Are their NS records listed in the SBL?
>>>
>>>- --j.
>
>> No, but extremely easy to add. However....I'm not sure Jeff 
>would like that.
>> Would have to be a seperate list. 
>
>> -_Chris
>
>ADD THEM TO SBL.  DO NOT ADD THEM TO SURBL.
>
>Holy fsck guys!  We have a good thing going here.  We're put a
>lot of work into it so far, and it's working pretty well.  Let's
>not tear apart the SURBL project, OK?
>
>Give me a chance to make some improvements in the next version
>of the data engine.  It will take into account resolved IPs
>and get new domains onto the lists sooner.
>


ahahahahahha...lookout....he's gonna blow! :-)

I didn't see the bigger picture here. Didn't know that SA devs have written
it that way because SC already did this. Knowing now that SC already does
this, I wouldn't want the extra work for SURBL. So...on this idea...your
safe. 

One never knows what freaky idea I might come up with tomorrow ;)

--Chris (Still ying to Jeff's yang!)


More information about the Discuss mailing list